1. Who is responsible
Think Bossi LLC, Texas, USA, is responsible for the personal information processed through ThinkBossiBot™. This policy explains what we collect, why we collect it, who we share it with, and the choices you have.
2. Information we collect
- Account and identity data from Telegram: your Telegram user ID, first and last name, username, profile photo URL and language, provided when you launch the Mini App. We verify this data cryptographically so accounts cannot be spoofed.
- Conversation data: the messages you send to Bossi and the responses generated, together with the conversation mode and timestamps.
- Structured coaching data: content you create in Bossi Blueprint™, Bossi Roadmap, Bossi Reset™ and goals.
- Bossi Memory: short factual notes selected for continuity, described in the Bossi Memory & AI Data Notice.
- Subscription and usage data: plan, subscription status, renewal dates, AI session counts, token usage, model routing metadata, latency and error events.
- Attribution data: first-touch campaign source, campaign name and referrer, where available.
- Technical and diagnostic data: limited error and performance logs needed to keep the Service working.
3. Payment information
Payments are processed by our third-party payment provider. Full payment card numbers are handled by that provider and are not stored by Think Bossi. We receive limited billing metadata such as plan, subscription status, renewal date and payment outcome so we can grant or remove access.
4. Why we use your information
- To operate the Service, generate responses and keep your work available across sessions.
- To provide continuity through Bossi Memory and linked Blueprint, Roadmap and Reset context.
- To manage subscriptions, entitlements, allowances and fraud or abuse prevention.
- To maintain security, debug problems and improve reliability and quality.
- To comply with legal obligations and enforce our terms.
5. AI processing
To generate responses, the content of your conversation and relevant saved context are sent to one or more third-party AI model providers through our AI gateway. The specific models and providers used are selected automatically based on the task and may change as we improve routing, quality, cost and reliability.
Because provider selection is dynamic, we do not list a fixed provider here. The current live configuration is maintained in our production settings, and admins can review the routing and model usage in the in-app admin usage view. We do not sell your conversation content, and we do not use it to train third-party public models where our provider agreements allow us to opt out.
6. Sharing
We do not sell your personal information.
- Service providers acting on our behalf: hosting and database infrastructure, AI model providers via our AI gateway, the payment provider, and messaging delivery through Telegram.
- Legal and safety: where required by law, legal process, or to protect rights, safety, and the integrity of the Service.
- Business transfers: in a merger, acquisition or sale of assets, subject to this policy.
7. Retention
We keep information for as long as your account is active and for as long as needed for the purposes described here, including legal, accounting, security and dispute-resolution needs. You can delete individual memories, clear all memory, delete conversations, or request account deletion at any time from the Legal & Privacy center. Deleting your account removes your profile and the linked conversation, memory, coaching and usage records associated with it, subject to limited records we must retain for legal or financial reasons.
8. Security
Identity is verified server-side using signed Telegram launch data, and your records are reachable only through server-side code scoped to your verified account. Direct database access from browsers is disabled. No system is perfectly secure, so we cannot guarantee absolute security.
9. Your choices and rights
Depending on where you live, you may have additional rights under laws such as the Texas Data Privacy and Security Act, other US state privacy laws, or the GDPR. Use the Manage My Data tools in the Legal & Privacy center to make a request. We will not discriminate against you for exercising a privacy right.
- View, export or delete what Bossi remembers about you.
- Delete individual conversations or your entire account.
- Request access to, correction of, or deletion of your personal information.
- Object to or restrict certain processing where applicable law provides that right.
10. International transfers
We operate from the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.
11. Children under 18
The Service is for adults 18 and over. We do not knowingly collect information from minors. If you believe a minor has used the Service, contact us and we will delete the account.
12. Changes to this policy
We may update this policy. The effective date at the top of this page shows the current version. Material changes may require you to accept updated terms in the app.
13. Contact
Privacy questions and requests can be submitted through the Contact Think Bossi page in the Legal & Privacy center.